Tagged Questions
4
votes
1answer
103 views
Are we obliged to provide a complete log should auditors ask for it?
We have a system that outputs and rotate logs on a daily basis.
If an auditor requests us to provide logs of a particular date for a particular task, are we obliged to provide a complete full day ...
1
vote
1answer
373 views
Windows Session Recording Software
I'm trying to monitor connections and actions made by administrators (or any user connecting) to a server through TSE (i'm simplifying).
I've heard about a software which can record a video of any ...
3
votes
1answer
530 views
Should I only disable, but never delete an account from ActiveDirectory?
In the early days of NT4, I would never delete an account from the domain because I would lose the correlation between the SID and username in event logs and all related audit trails.
Is this a ...
3
votes
1answer
133 views
What useful security reports can be extracted from a Windows-based machine and its' related logs?
What logs and event IDs should I be paying attention to when looking at a Windows-based machine (workstation, server, Domain Controller)?
Assuming I can aggregate them into a report what ...
